pub fn validate_subdir(s: &str) -> Result<()>
A relative path inside the checkout, never escaping it.